[PATCH] last fixes for heimdal & security=ads

Gerald (Jerry) Carter jerry at samba.org
Thu Jul 8 15:15:36 GMT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Guenther Deschner wrote:
| Hi,
|
| * winbindd dies currently if we close the ccache. Jerry had that
| disabled, Jeremy renenabled. I would propose to redisable it :)
| At least until there is an official heimdal-version that deals with it.
|
| * net ads changetrustpw was still using the host/fqdn at realm-syntax for
| kinits.
|
| * It would make sense to be a little more verbose when there are
krb5-errors
| in net_ads.c
|
| the last issue so far:
|
| since some time (0.6.1?) heimdal returns
| "ANY:FILE:/etc/krb5.keytab,krb4:/etc/srvtab" (instead of
| FILE:/etc/krb5.keytab in earlier heimdal-versions) for
| krb5_kt_default()-calls. this is confusing the current samba-keytab-code
| somewhere (without having researched it completly). For now we maybe just
| point to
|
| "please set 'default_keytab_name = FILE:/etc/krb5.keytab' in
| /etc/krb5.conf when you use heimdal"
|
| in WHATSNEW.TXT or somewhere else in the documentation.

Got all three points.  Thanks Guenther.





- --
cheers, jerry
- ----------------------------------------------------------------------
Hewlett-Packard            ------------------------- http://www.hp.com
SAMBA Team                 ---------------------- http://www.samba.org
GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." ----------- Sting
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA7WUYIR7qMdg1EfYRAlcRAJ4p/cXtEK7KdKG/WvMZWgztoIRChQCg5f/m
XAGYNGLP87H9StYCgvZUq6s=
=Fn/r
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list